GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed adv 10000 isories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,912
Erlang
39
GitHub Actions
38
Go
2,569
Maven
5,000+
npm
4,245
NuGet
754
pip
4,006
Pub
12
RubyGems
953
Rust
1,042
Swift
45
Unreviewed advisories
All unreviewed
5,000+
11,533 advisories
Filter by severity
An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos...
High
Unreviewed
CVE-2025-26781
was published
Oct 20, 2025
A vulnerability was found in ChurchCRM up to 5.18.0. This vulnerability affects unknown code of...
Moderate
Unreviewed
CVE-2025-11938
was published
Oct 19, 2025
Due to improper input validation, a buffer overflow vulnerability is present in
Zigbee EZSP...
Critical
Unreviewed
CVE-2025-8414
was published
Oct 17, 2025
alloy-dyn-abi has DoS vulnerability on `alloy_dyn_abi::TypedData` hashing
High
CVE-2025-62370
was published
for
alloy-dyn-abi
(Rust)
Oct 15, 2025
Improper input validation in the component /kafka/ui/serdes/CustomSerdeLoader.java of kafka-ui v0...
Moderate
Unreviewed
CVE-2025-60537
was published
Oct 14, 2025
Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform...
High
Unreviewed
CVE-2025-59248
was published
Oct 14, 2025
Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to...
High
Unreviewed
CVE-2025-59250
was published
Oct 14, 2025
Improper input validation in Microsoft Windows Search Component allows an authorized attacker to...
Moderate
Unreviewed
CVE-2025-59198
was published
Oct 14, 2025
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute...
High
Unreviewed
CVE-2025-59228
was published
Oct 14, 2025
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate...
High
Unreviewed
CVE-2025-59207
was published
Oct 14, 2025
Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker...
Moderate
Unreviewed
CVE-2025-59190
was published
Oct 14, 2025
Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges...
High
Unreviewed
CVE-2025-59187
was published
Oct 14, 2025
Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate...
High
Unreviewed
CVE-2025-58716
was published
Oct 14, 2025
Improper input validation in Windows Kernel allows an unauthorized attacker to disclose...
Moderate
Unreviewed
CVE-2025-55679
was published
Oct 14, 2025
Improper input validation in Windows Error Reporting allows an authorized attacker to elevate...
High
Unreviewed
CVE-2025-55692
was published
Oct 14, 2025
A security issue was discovered within FactoryTalk® ViewPoint, allowing unauthenticated attackers...
High
Unreviewed
CVE-2025-9066
was published
Oct 14, 2025
A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) (All...
High
Unreviewed
CVE-2011-20001
was published
Oct 14, 2025
HCL Unica MaxAI Workbench is vulnerable to improper input validation. This allows attackers to...
Low
Unreviewed
CVE-2025-31995
was published
Oct 13, 2025
cel-rust May Panic During Parsing of Invalid CEL Expressions
High
CVE-2025-62162
was published
for
cel
(Rust)
Oct 11, 2025
Astro's `X-Forwarded-Host` is reflected without validation
Moderate
CVE-2025-61925
was published
for
astro
(npm)
Oct 10, 2025
Authlib is vulnerable to Denial of Service via Oversized JOSE Segments
High
CVE-2025-61920
was published
for
authlib
(pip)
Oct 10, 2025
Information disclosure may occur while processing the hypervisor log.
Moderate
Unreviewed
CVE-2025-27040
was published
Oct 9, 2025
vLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible Server
Moderate
CVE-2025-61620
was published
for
vllm
(pip)
Oct 7, 2025
Nodemailer: Email to an unintended domain can occur due to Interpretation Conflict
Moderate
GHSA-mm7p-fcc7-pg87
was published
for
nodemailer
(npm)
Oct 7, 2025
A vulnerability has been found in ILIAS up to 8.23/9.13/10.1. This affects the function...
Moderate
Unreviewed
CVE-2025-11346
was published
Oct 6, 2025
ProTip!
Advisories are also available from the
GraphQL API